Upstream information

CVE-2017-5183 at MITRE

Description

NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field of a signed AuthnRequest in a samlp:AuthnRequest document.

SUSE information

Overall state of this security issue: Does not affect SUSE products

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

  • TID7018509, published Sa 3. Mär 12:02:31 CET 2018

SUSE Timeline for this CVE

CVE page created: Fri Apr 21 00:16:50 2017
CVE page last modified: Tue Jul 1 12:30:55 2025